Before you begin

Basic IAM and AWS account knowledge.

What you will learn

Understand account foundations, preventive controls, and detection.

Lessons

  1. Setting Up a Well-architected Automated AWS Landing Zone...

    How to set up a well-architected, automated AWS Landing Zone using AWS Control Tower to build a secure, compliant multi-account environment from the ground up.

  2. Protecting AWS Organization with Service Control Policies (SCPs)

    How to protect your AWS Organization with Service Control Policies (SCPs) for centralized, account-wide permission guardrails that strengthen security and compliance.

    Includes a link to the full article on an external site.
  3. Understanding AWS Resource Control Policies (RCPs): A Comprehensive Guide...

    A comprehensive guide to AWS Resource Control Policies (RCPs) and how they give you centralized control over resource permissions across your AWS Organization.

  4. Achieving Organizational Compliance with AWS Config Conformance Packs: Methodology, Implementation, and Lifecycle Management...

    A deep dive into AWS Config Conformance Packs: methodology, implementation, and lifecycle management for enforcing organizational compliance across accounts and regions.

  5. Centralized Log Management in AWS using AWS CloudTrail...

    How to build centralized log management in AWS using AWS CloudTrail to capture, aggregate, and analyse account and API activity across your organization.